designated cipher function

As part of the choice of the underlying block cipher with a KEK, either the forward transformation or the inverse transformation.